Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.mft
File: h0tZG12PB26vRy4-pF07XI4TUKE.mft (raw, json)
Hash identifier: LqRerDPxGEXd7Kptg0aOJBrtUSZShBxbIwNz0DAXbmc=
Subject key identifier: 7F:31:F1:A8:88:F3:45:2E:A4:FE:B6:36:0E:6A:0F:25:B0:4C:F4:06
Authority key identifier: 87:4B:59:1B:5D:8F:07:6E:AF:47:2E:3E:A4:5D:3B:5C:8E:13:50:A1
Certificate issuer: /CN=874b591b5d8f076eaf472e3ea45d3b5c8e1350a1
Certificate serial: 01A06D5DDAD51BED9B7C8FDB3EFC40A490AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0tZG12PB26vRy4-pF07XI4TUKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.mft
Manifest number: 1A3C
Signing time: Fri 04 Sep 2026 17:01:02 +0000
Manifest this update: Fri 04 Sep 2026 17:01:02 +0000
Manifest next update: Sat 05 Sep 2026 17:01:02 +0000
Files and hashes: 1: JqglYn9oExlpuQ-Y68kS4ik8jRI.roa (hash: lo9W0LCZNdcrhkqYexTlEJ9bxvUJuTPrwpGw86jlaFk=)
2: h0tZG12PB26vRy4-pF07XI4TUKE.crl (hash: E0HTvlMEseEVYkKWnnE2uGOHHandH2CK/jAI7PQXhQc=)
3: vAlQFpaLpXoMpWo27m8dZRrzZKc.roa (hash: V3cMkhkIFwXZN0a+IEYOXNX5PaTP19/XRl5SDnAT0cg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/h0tZG12PB26vRy4-pF07XI4TUKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 17:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:5d:da:d5:1b:ed:9b:7c:8f:db:3e:fc:40:a4:90:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874b591b5d8f076eaf472e3ea45d3b5c8e1350a1
Validity
Not Before: Sep 4 17:01:02 2026 GMT
Not After : Sep 5 17:01:02 2026 GMT
Subject: CN=7f31f1a888f3452ea4feb6360e6a0f25b04cf406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f6:fe:d9:a7:43:83:b2:23:33:8b:76:6e:14:
2b:b0:3d:d7:0f:4a:4f:3d:f9:df:b5:76:30:4a:d4:
32:0a:3b:c4:77:b2:91:ff:d4:c2:4b:80:0d:69:85:
a1:5c:f2:bb:c2:eb:52:67:9d:90:17:2b:a8:62:68:
1a:f8:bf:fd:f7:17:64:cf:9b:44:1a:86:52:45:15:
1c:c1:b6:48:c3:36:fa:c8:8b:16:ce:16:45:17:0c:
8a:d7:e8:cf:22:c5:a3:f0:8d:3a:f1:ae:80:a3:5f:
e9:97:b5:b8:9b:dd:53:50:ab:43:59:13:40:7a:d3:
9d:18:0e:2f:81:e4:1f:3c:28:c8:4e:61:91:06:ab:
48:94:73:e5:f0:2d:74:e9:18:e7:a4:f0:23:fe:b3:
41:d8:bc:1a:ce:dc:15:ba:83:e6:24:f9:f1:69:6d:
12:f1:6a:32:06:31:87:ce:3e:cc:c9:0e:1d:f6:87:
51:19:b6:16:3e:60:3e:40:eb:0c:e3:a1:e8:78:b0:
88:f2:df:21:48:ad:5c:e5:bf:83:f0:fd:6f:8a:c1:
74:35:07:43:b3:80:ff:8b:ca:57:a2:ee:b8:16:b3:
a1:a4:18:81:bf:f1:4c:e4:f6:80:70:1e:8c:81:68:
a0:b5:45:a1:18:2e:01:b0:49:c7:1e:3b:56:03:a1:
71:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:31:F1:A8:88:F3:45:2E:A4:FE:B6:36:0E:6A:0F:25:B0:4C:F4:06
X509v3 Authority Key Identifier:
keyid:87:4B:59:1B:5D:8F:07:6E:AF:47:2E:3E:A4:5D:3B:5C:8E:13:50:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0tZG12PB26vRy4-pF07XI4TUKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:78:80:ba:6c:11:b8:ef:c2:7f:9f:65:c4:95:33:30:cc:0f:
b8:01:f0:33:be:42:47:f6:1e:bf:d0:d8:62:c6:d8:dc:8f:c5:
cc:96:8e:05:68:8f:0f:25:9d:97:cc:55:26:89:60:9b:b3:e5:
c6:56:ee:04:f0:8f:04:f0:e0:68:40:35:a4:e8:59:0f:29:ab:
f1:46:44:45:f1:0c:45:f4:b1:17:dd:f1:cb:0f:d4:04:dc:c7:
cd:09:fc:ab:53:9d:a9:ae:1b:9c:26:af:d1:d2:da:40:30:bd:
62:21:21:1e:2b:6d:37:ca:69:cd:b0:16:04:48:9e:97:5e:9a:
81:32:72:08:75:c3:fe:32:31:89:36:a7:9f:2b:23:4e:48:7b:
a9:ff:58:36:af:49:36:24:e8:a9:dc:3d:c0:be:2c:3f:8a:0c:
61:4d:f9:21:ef:d1:03:12:f2:56:82:51:51:3c:8c:6d:05:90:
8b:89:67:d2:d9:4f:02:4b:90:5f:41:d3:6b:ab:5c:f3:d5:98:
38:dd:6e:f8:ac:be:c3:40:c0:b0:45:09:e4:cd:e7:43:f2:17:
d1:df:09:44:1f:d4:21:b9:77:d7:7c:78:fc:f9:16:8f:16:97:
cf:b5:e8:f9:ff:7c:6e:85:37:78:c2:0e:3e:9f:f0:f4:f4:07:
81:11:30:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:57:07 2026 by rpki-client